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DETAILED ACTION 



1. 



Receipt is acknowledged of the Amendment received on 12 September 2005. 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of the claims under 
35 U.S.C. 103(a), the examiner presumes that the subject matter of the various claims was 
commonly owned at the time any inventions covered therein were made absent any evidence to 
the contrary. Applicant is advised of the obligation under 37 CFR 1 .56 to point out the inventor 
and invention dates of each claim that was not commonly owned at the time a later invention was 
made in order for the examiner to consider the applicability of 35 U.S.C. 103(c) and potential 35 
U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

2. Claims 1-15 and 17-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Black, as cited in the previous Office Action, in view of de Sylva (US 2005/0098621). 

Re claim 1 Black (US 2005/0122209) teaches a smartcard transaction system configured 
with a biometric security device, the system comprising: a smartcard configured to communicate 
with a reader, wherein the reader and biometric security device communicate with a hose; a 
biometric security device comprising a biometric sensor configured to detect a proffered 
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biometric sample, the biometric sample configured to communicate with the system; and, a 
means to verify the proffered biometric sample to facilitate a transaction (FIG. 1C, which teaches 
a smartcard (abstract), smartcard reader, biometric sensor (step 6 of FIG. 1C), and steps 7+ 
which teach authentication and to facilitate a transaction (by a device)). Though Black is silent 
to a specific verification device, the Examiner notes that it would have been obvious to one of 
ordinary skill in the art to use a verification device to verify that the sample is an authentic 
biometric sample, for increased security. The Examiner notes that such devices are conventional 
in the art and therefore are obvious expedients. 

Black is silent to the biometric sample being associated with at least two accounts 
wherein each of the two accounts includes at least one of a charge card account, a credit card 
account, a debit card account, a savings account, a private label account, and a loyalty point 
account. 

The Examiner notes that it is well known and conventional that one card/transponder can 
have many consolidated accounts on it/access to many accounts, for convenience of the user (a 
consolidated card requires less cards to be carried by a user and is more convenient). Along 
those lines, de Sylva teaches a biometric sample is associated with at least two accounts, wherein 
each of the accounts includes at least one of a charge card account, a credit card account, a debit 
card account, a savings account, a private label account, and a loyalty point account (paragraph 



At the time the invention was made, it would have been obvious to one of ordinary skill 
in the art to combine the teachings of Black with those of de Sylva. 



[0045]). 
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One would have been motivated to do this to provide convenience for the user by 
providing many accounts associated with a user where the user can set the relationship between 
purchases and accounts, without requiring a unique Al/biometric sample for each account, as the 
rules as set forth in an electronic fashion and transactions proceed automatically using the correct 
account based on user preferences. 

Re claim 2, Black teaches the sensor is configured to communicate with the system via at 
least one of a smartcard, a reader, and a network (FIG. 1C). 

Re claim 3, Black teaches the biometric sample is captured (see above). Though silent to 
a sensor facilitating a finite number of scans, it is obvious that a finite number of scans is 
facilitated (one for example) to receive the biometric. 

Re claim 4, Black teaches that the digital and electronic signatures are captured and 
preserved in a transaction record (paragraph [0125]). This is interpreted to include logging at 
least one of a detected biometric sample, processed biometric sample, and stored biometric 
sample. Though Black is silent to the biometric sensor doing the logging, the Examiner notes 
that it would have been obvious for the sensor to do the logging, since it captures/receives the 
inputs. Additionally, though silent to security procedures when the data doesn't match, the 
Examiner notes that it is well known and conventional to allow users a couple attempts to access 
a system before performing a security procedure (3 attempts at a password, PIN, etc. before 
blocking access for a predetermined time). It would have been obvious to allow the user a 
couple attempts before blocking the user, transponder, etc. to provide the user an attempt to 
rectify a mistake made during providing biometric information. Such means are well known and 
conventional in the art for access control, and employing them in a biometric system is an 
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obvious expedient to provide security, while also allowing a user more than one attempt at access 
in case a mistake is made. 

Re claim 5, Black teaches that a data packet is stored remotely (host computer) where the 
data packet includes at least one of proffered and registered biometric samples, proffered and 
registered user information, terrorist information, and criminal information (paragraph [0125], 
FIG. 10A-1 IB and 14A-14B). The Examiner notes that though such data packet/information is 
shown with reference to a transponder/RFID, Black states that the device can be a smartcard, 
transponder, etc. (abstract). Accordingly, it is obvious that such teachings can be applied to 
smartcards to produce expected results for data storage and retrieval for verifying a transaction 
using biometrics, especially since it has been taught that such information can be stored on the 
transponder/card itself or remotely (for security reasons) (paragraph [0090]+). Though silent to a 
database, the Examiner notes that storing records on a computer in a database is an obvious 
expedient, well within the skill in the art to organize data for efficient comparison and retrieval. 

Re claim 6, as discussed above, the data packet information can be stored on a host 
computer, which is interpreted to include at least one of the smart card, smartcard reader, sensor, 
remote server, merchant server, and smartcard system Though not specifically identified as a 
server, it would be obvious that the computer is a server, in order to process data/access 
remotely, for example. 

Re claim 7, Black teaches the host computer is associated with the registering and 
storing/processing of the biometric data used to verify transactions. Though silent to an 
authorized sample receiver, it is obvious that such a receiver would be authorized, as it is used to 
facilitate and verify biometrics for transactions. 
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Re claim 8, Black teaches a device configured to compare a proffered biometric sample 
with a stored biometric sample (FIG. 1C ). 

Re claim 9, Black teaches a device configured to compare at least one characteristic of a 
biometric sample including at least one of minutia, vascular patterns, prints, waveforms, 
odorants, nodal points, reference points, size, shape, thermal patterns, blood flow, and body heat 
(FIG. 1C which teaches comparison of fingerprint and signature). 

* 

Re claim 10, as Black teaches a card reader processor (FIG. 1A, IB, 1C) in 
communication with the host computer, it is understood that the card reader processor is used to 
compare the samples (see claim 1 of Black). It is obvious that different embodiments of Black 
teach the use of a transponder and that the local processor performs comparison, and that such 
teaching can be applied to the instance of a smart card, in order to verify proffered biometric data 
to facilitate a transaction. The Examiner notes that both comparisons done remotely or locally 
are both obvious expedients, based on the system design and security of the system, but is 
nonetheless within the ordinary skill in the art. 

Re claim 11, Black teaches the comparison of sensed data with reference data (FIG. 1C). 
The reference data is a registered biometric sample. 

Re claim 12, Black teaches a registered biometric sample is associated with at least one 
of personal information, credit card information, debit card information, savings account 
information, membership information, PayPal account information, Western Union account 
information, electronic bill payment information, automatic bill payment information and loyalty 
point information (abstract, as an account is linked with the biometrics provided during a 
registration). 
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Re claim 13, as Black teaches different people using the system with different biometrics, 
it is obvious that each sample would be associated with a different account, because different 
peoples samples would be unique, and each person could have a sample linked to an account. 

Re claim 14 the teachings of Black have been discussed above. 

Black is silent to the sample being primarily associated with a first user account and 
secondarily associated with another account, different from the first. 

De Sylva teaches such limitations through the use account record 30. 

At the time the invention was made, it would have been obvious to one of ordinary skill 
in the art to combine the teachings of Black with those of de sylva. 

One would have been motivated to do this to have additional accounts associate with a 
sample for more flexibility and customization for the user. 

Re claim 15, as Black teaches that an account is only accessed after a sample is verified, 
it is interpreted as beginning authentication after the sample is verified. 

Re claim 17, though Black is silent to the sensor providing notification upon detection of 
a sample, the Examiner notes that it is well within the skill in the art to provide notification that a 
sample has been detected/received (see previous Office Actions reference to Janiak et al.). 
Though Black is silent to providing notification that a primary account is being accessed, the 
Examiner notes that the failure to detect a sample/fail to verify a sample, would be evident to the 
user by a lack of response or a rejected attempt. Positive notification is merely an equivalent. 
Further, the Applicant has not shown that positive notification of sample detecting would 
materially affect the workings of the invention, as compared with what can be considered passive 
notification. The Examiner notes that merely providing notification that the account is being 
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accessed (to the customer/store employee for example) is well known and conventional in the art 
as evidenced through conventional debit/credit card transactions which indicate to users/workers 
that authorization is occurring, and through processing and completion of the transaction, 
positive notification is provided (such as through text, audio, visual, or mere completion of the 
transaction) . It would have been obvious to one of ordinary skill in the art to provide such 
information, in order to keep the customer/worker aware of the status of the transaction. 

Re claim 18, Black teaches the device configured to verify is further configured to 
facilitate at least one of access, activation of a device, a financial transaction, and a non-financial 
transaction (abstract, and as the system as a whole facilitates such means, and as a verification 
device is part of the system is therefore facilitates such means). 

Re claim 19, Black teaches the device configured to verify s configured to facilitate the 
use of at least one secondary security procedure (signature, metrics FIG. 1C). Black teaches the 
use of a transaction record (paragraph [0125]) but it silent to the record occurring during 
unauthorized access attempts. However, the Examiner notes it would have been obvious to one 
or ordinary skill in the art to store such attempts in order to obtain security information regarding 
usage and attempts to access accounts illegally. 

Black is silent to the verification device sending a signal to the host device to notify that 
an established rules for the transponder is being violated. 

De Sylva teaches remote database 32 stores non-authenticated data from the verifier (50) 
(paragraph [0032]). 

At the time the invention was made, it would have been obvious to one of ordinary skill 
in the art to combine the teachings of Black with those of de Sylva. 
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One would have been motivated to do this in order to alert instances of fraud. It would 
have been obvious for the verification device to complete such steps as it is responsible for 
verifying the sample, if the sample is not verified it would be obvious o create notification for 
fraud. 

3. Claim 16 is rejected under 35 U.S.C 103(a) as being unpatentable over Black/de Sylva, 
as discussed above, in view of Goodman, as cited in the previous Office Action. 

Re claim 16, the teachings of Black/de Sylva have been discussed above. 

Though it is obvious that if the biometric samples do not match that a transaction is not 
permitted to be executed, Black/de Sylva is silent to the smartcard deactivating upon rejection of 
the biometric sample . 

Goodman et al. teaches Goodman et al. teaches deactivation of a card if a predetermined 
amount of incorrect PIN attempts are detected (paragraph [0029]). 

At the time the invention was made, it would have been obvious to an artisan of ordinary 
skill in the art to combine the teachings of Black/de Sylva with Goodman et al. 

One would have been motivated to do this to increase the security of the system by 
disabling a card after a number of incorrect inputs. 

Though Goodman is silent to a biometric input, the Examiner notes that Goodman 
supplies a teaching for disabling a card when a matching input is not received. As Black teaches 
not allowing a transaction, when a input is not matched (and other reference cited in the previous 
Office Action teach contacting authorities), it would have been obvious to use the teachings of 



Goodman to expand the security measures and to disable the card so that unauthorized used does 
not occur, when biometric inputs do not match, where biometric inputs are interpreted as an 
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alternative security measure to PIN inputs, to provide additional security. Biometric samples are 
a more secure identifier (as taught by Black) but it would still be obvious to disable the card 
when the identifiers do not match, whether it be a PIN or biometric, in order to increase 
security/reduce fraud. 

Response to Arguments 

4. Applicant's arguments with respect to claims 1-19 have been considered but are moot in 
view of the new ground(s) of rejection. 

Additional Remarks 

5. The Examiner notes that PINs associated with biometrics are well-known and 
conventional for increased security (versus just a biometric; see US 2001/0029493, 5,764,789, 
2004/0084524, 2002/0174067, 2002/0062284, 2001/0018660 for example, which show that a 
PIN and biometric can be used for additional security over just a PIN or biometric, for example.) 
The Examiner also notes Royer et al. (US 2004/0155101) teaches the use of different biometrics 
with multiple accounts and Ramachandran (US 2001/0013551) and Pitroda (US 6,925,439) 
which teach consolidation of card accounts onto one card for convenience. 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure: Johnson et al. (US 2005/0021457), Black (US 2005/0180618), Zoka9US 6,591,249), 
Bishop et al. (US 2005/0187773), Cassone (US 2004/0188519), Robinson (US 2003/0061 172), 
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Tanner et al. (US 2002/0073025), Zoka (US 2002/0062291), Pare et al (US 2001/0029493 and 
6,154,879), and Shinzaki (US 6,765,470). These references include biometric access teachings, 
employing security features such as contacting authorities, police, etc., and storing of data. 
7. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Daniel I. Walsh whose telephone number is (571) 272-2409. The 
examiner can normally be reached on M-F 7:30-4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Michael G. Lee can be reached on (571) 272-2398. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
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Application Information Retrieval (PAIR) system Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 




